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AMENDMENTS TO THE CLAIMS; 

This listing of claims will replace all prior versions, and listings, of claims in the 
application: 

1 . (currently amended) A data processing apparatus, comprising: 

a processor op e rablc configured in a plurality of modes and a plurality of domains, 
said plurality of domains comprising a secure domain and a non-secure domain, said plurality of 
modes including at least one non-secure mode being a mode in the non-secure domain, at least 
one secure mode being a mode in the secure domain, and a monitor mode, said processor being 
operabl e configured such that when executing a program in a secure mode said program has 
access to secure data which is not accessible when said processor is operating in a non-secure 
mode; 

a storage unit op e rabl e configured to store processor configuration data; 

said processor being operable configured at least partially in said monitor mode to 
execute a monitor program to manage switching between said secure domain and said non- 
secure domain, said switching including switching the processor configuration data in the storage 
unit between secure processor configuration data and non-secure processor configuration data; 

when in said monitor mode, said monitor program being op e rabl e configured to 
use monitor mode specific processor configuration data, thereby ensuring that operation of the 
processor in said monitor mode is unaffected by the switching of the processor configuration 
data. 
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2. (currently amended) A data processing apparatus as claimed in Claim 1, wherein 
said processor configuration data is operabl e confmured to control access to memory by the 
processor. 

3. (currently amended) A data processing apparatus as claimed in Claim 2, wherein 
the memory is oporable configured to store data required by the processor and comprises secure 
memory for storing the secure data and non-secure memory for storing non-secure data, said 
processor configuration data comprising memory permission data identifying whether the 
processor is allowed to access said secure data. 

4. (original) A data processing apparatus as claimed in Claim 2, wherein said 
processor configuration data comprises memory space configuration data identifying which areas 
of memory are accessible by the processor. 

5. (original) A data processing apparatus as claimed in Claim 4, wherein said 
memory includes a tightly coupled memory, and said memory space configuration data includes 
data for controlling the processor's access to said tightly coupled memory. 

6. (original) A data processing apparatus as claimed in Claim 4, wherein said 
memory includes a cache, and said memory space configuration data includes data for 
controlling the processor's access to said cache. 
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7. (original) A data processing apparatus as claimed in Claim 1, wherein said 
storage unit comprises one or more system configuration registers. 

8. (original) A data processing apparatus as claimed in Claim 1, wherein said 
monitor mode specific processor configuration data is hard-coded. 

9. (currently amended) A data processing apparatus as claimed in Claim 1, further 
comprising: 

selection logic op e rabl e confi gured to select between said processor configuration 
data stored in the storage unit and said monitor mode specific processor configuration data in 
dependence on a control signal identifying whether the processor is operating in said monitor 
mode. 

10. (currently amended) A data processing apparatus as claimed in Claim 1, wherein 
in said at least one non-secure mode the processor is operabl e con figured under the control of a 
non-secure operating system and in said at least one secure mode the processor is 
op e rabl e confi gured under the control of a secure operating system. 

1 1 . (original) A data processing apparatus as claimed in Claim 3, wherein said 
monitor mode specific processor configuration data comprises memory permission data that 
indicates that the processor is allowed to access said secure data in said monitor mode. 
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12. (currently amended) A data processing apparatus as claimed in Claim 2, further 
comprising: 

a memory management unit op e rable configured, upon receipt of a memory access 
request from the processor, to perform one or more predetermined access control functions to 
control issuance of the memory access request to the memory; 

said monitor mode specific processor configuration data indicating that said 
memory management unit is disabled in said monitor mode. 

13. (original) A data processing apparatus as claimed in Claim 2, wherein said 
memory includes a cache, and said monitor mode specific processor configuration data indicates 
that the processor is not allowed to use said cache to access data in said monitor mode. 

14. (original) A data processing apparatus as claimed in Claim 1 1, wherein at least a 
portion of said monitor mode specific processor configuration data is derived from the secure 
processor configuration data. 

1 5. (currently amended) A method of managing processor configuration data in a 
data processing apparatus comprising a processor op e rable configured in a plurality of modes and 
a plurality of domains, said plurality of domains comprising a secure domain and a non-secure 
domain, said plurality of modes including at least one non-secure mode being a mode in the non- 
secure domain, at least one secure mode being a mode in the secure domain, and a monitor 
mode, said processor being operable confi gured such that when executing a program in a secure 
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mode said program has access to secure data which is not accessible when said processor is 
operating in a non-secure mode, said method comprising the steps of: 

executing on said processor at least partially in said monitor mode a monitor 
program to manage switching between said secure domain and said non-secure domain, 
including performing the step of switching the processor configuration data between secure 
processor configuration data and non-secure processor configuration data; 

when in said monitor mode, said monitor program using monitor mode specific 
processor configuration data, thereby ensuring that operation of the processor in said monitor 
mode is unaffected by the switching of the processor configuration data. 

1 6. (currently amended) A method as claimed in Claim 1 5, wherein said processor 
configuration data is operabl e configured to control access to memory by the processor. 

17. (currently amended) A method as claimed in Claim 16, wherein the memory is 
op e rabl e configured to store data required by the processor and comprises secure memory for 
storing the secure data and non-secure memory for storing non-secure data, said processor 
configuration data comprising memory permission data identifying whether the processor is 
allowed to access said secure data. 

18. (original) A method as claimed in Claim 16, wherein said processor 
configuration data comprises memory space configuration data identifying which areas of 
memory are accessible by the processor. 
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1 9. (original) A method as claimed in Claim 1 8, wherein said memory includes a 
tightly coupled memory, and said memory space configuration data includes data for controlling 
the processor's access to said tightly coupled memory. 

20. (original) A method as claimed in Claim 1 8, wherein said memory includes a 
cache, and said memory space configuration data includes data for controlling the processor's 
access to said cache. 

21 . (original) A method as claimed in Claim 15, further comprising the step of 
storing said processor configuration data in one or more system configxiration registers. 

22. (original) A method as claimed in Claim 1 5, wherein said monitor mode specific 
processor configuration data is hard-coded. 

23. (original) A method as claimed in Claim 1 5, further comprising the step of: 
selecting between said processor configuration data and said monitor mode 

specific processor configuration data in dependence on a control signal identifying whether the 
processor is operating in said monitor mode. 

24. (currently amended) A method as claimed in Claim 1 5, wherein in said at least 
one non-secure mode the processor is op e rable configured under the control of a non-secure 
operating system and in said at least one secure mode the processor is op e rabl e configured under 
the control of a secure operating system. 
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25. (original) A method as claimed in Claim 17, wherein said monitor mode specific 
processor configuration data comprises memory permission data that indicates that the processor 
is allowed to access said secure data in said monitor mode. 

26. (original) A method as claimed in Claim 16, further comprising the step of: 
upon receipt of a memory access request from the processor, employing a 

memory management unit to perform one or more predetermined access control functions to 
control issuance of the memory access request to the memory; 

said monitor mode specific processor configuration data indicating that said 
memory management unit is disabled in said monitor mode. 

27. (original) A method as claimed in Claim 16, wherein said memory includes a 
cache, and said monitor mode specific processor configuration data indicates that the processor is 
not allowed to use said cache to access data in said monitor mode. 

28. (original) A method as claimed in Claim 25, wherein at least a portion of said 
monitor mode specific processor configuration data is derived from the secure processor 
configuration data. 

29. (currently amended) A computer program encoded in a computer-readable 
medium op e rabl e executable to configure a processor in a data processing apparatus to manage 
processor configuration data, the processo r, when executing the computer program, being 
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op e rabl e configured in a plurality of modes and a plurality of domains, said plurality of domains 
comprising a secure domain and a non-secure domain, said plurality of modes including at least 
one non-secure mode being a mode in the non-secure domain, at least one secure mode being a 
mode in the secure domain, and a monitor mode, said processor being operabl e configured such 
that when executing a program in a secure mode said program has access to secure data which is 
not accessible when said processor is operating in a non-secure mode, the processo r, when 
executing said computer program being op e rable configured to perform the steps of: 

whilstwhile at least partially in said monitor mode, managing switching between 
said secure domain and said non-secure domain, including performing the step of switching the 
processor configuration data between secure processor configuration data and non-secure 
processor configuration data; and 

when in said monitor mode, using monitor mode specific processor configuration 
data, thereby ensuring that operation of the processor in said monitor mode is unaffected by the 
switching of the processor configuration data. 



30. canceled. 



